For WPA first step is to see if WPS is on and try the WPSPIN script.
After that I check who is the ISP, normally you can tell from the name of the network. using that information you can find out (google or maybe you know someone with same provider) what kind of default WPA passwords the give their router. Then you try a bruteforce on that. fx i find that 10 digit hex is very normal.
After that dictionaries base on location language etc, but like epixoip said, then the best thing is to know your target. you can even try social engineering
And yes stanevs website for standard WPA dictionary attack, support it when you can!
After that I check who is the ISP, normally you can tell from the name of the network. using that information you can find out (google or maybe you know someone with same provider) what kind of default WPA passwords the give their router. Then you try a bruteforce on that. fx i find that 10 digit hex is very normal.
After that dictionaries base on location language etc, but like epixoip said, then the best thing is to know your target. you can even try social engineering
And yes stanevs website for standard WPA dictionary attack, support it when you can!